Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
File: D2vaHb-nfHTacoBe7lQY0_DMU50.mft (raw, json)
Hash identifier: j0iSSYVO+GTk/oskOBXFMLGujbA17N3vlppLNFqalUQ=
Subject key identifier: 10:31:C0:E0:68:BB:8B:3F:98:70:F4:07:4E:96:E5:54:81:F3:DB:89
Authority key identifier: 0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
Certificate issuer: /CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Certificate serial: 019F189E45C4C1A69497F64B4060856389CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
Manifest number: 16AB
Signing time: Tue 30 Jun 2026 13:00:53 +0000
Manifest this update: Tue 30 Jun 2026 13:00:53 +0000
Manifest next update: Wed 01 Jul 2026 13:00:53 +0000
Files and hashes: 1: D2vaHb-nfHTacoBe7lQY0_DMU50.crl (hash: G2Bs9YhZcdyingQ8Hph/NeRHstE77Ps82gVkIpmYnsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:45:c4:c1:a6:94:97:f6:4b:40:60:85:63:89:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Validity
Not Before: Jun 30 13:00:53 2026 GMT
Not After : Jul 1 13:00:53 2026 GMT
Subject: CN=1031c0e068bb8b3f9870f4074e96e55481f3db89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5f:2a:92:b5:e6:5a:b1:6e:71:bc:5a:a9:70:
5b:7e:5a:d6:95:1a:e5:81:c8:eb:77:ff:8b:e1:e5:
46:4e:d7:31:76:60:8d:54:6d:f2:4f:6e:ba:49:38:
44:be:2c:61:c4:24:7b:e9:ab:98:64:e3:86:a4:10:
36:90:36:98:2b:3b:92:9e:83:d5:b1:ac:3b:a5:b9:
ed:61:8b:b3:13:19:17:d1:6b:28:96:82:3a:2d:16:
f2:a6:a3:bb:32:78:f0:68:83:e7:b1:8f:86:e5:6f:
bd:67:67:5c:08:18:e8:a9:e1:a6:8a:07:f9:53:50:
19:80:6a:44:af:c9:22:e8:a9:4d:b6:44:a3:f7:02:
e5:6e:b4:ea:c3:4a:34:2d:a9:a5:44:2f:c4:a6:a6:
b1:b6:bf:58:3c:96:b2:2b:af:8a:df:81:25:c4:be:
fb:d2:da:10:c4:fc:90:bf:a8:61:3c:c7:db:bf:8f:
84:72:be:3c:06:ec:ec:8d:e1:62:9a:5c:5c:f9:78:
b2:3d:18:05:df:b4:28:23:6e:c9:ca:2c:87:67:6b:
d0:0c:b0:3b:72:5a:a0:a2:f9:47:ef:17:43:bf:da:
f7:75:ce:a8:33:4c:27:3e:75:6e:92:2e:31:02:bd:
51:8e:3c:0b:e2:91:7c:fa:80:fa:c5:62:ce:46:b0:
19:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:31:C0:E0:68:BB:8B:3F:98:70:F4:07:4E:96:E5:54:81:F3:DB:89
X509v3 Authority Key Identifier:
keyid:0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:95:7f:38:22:b0:eb:e1:25:93:c3:2c:32:62:3e:53:d4:b7:
fe:8d:11:82:bc:57:34:36:9e:16:3e:f1:e1:99:0b:b4:0a:5f:
04:46:a5:00:e2:74:d4:81:91:6e:cd:a3:0b:7d:c2:04:42:20:
33:74:5c:16:7c:a6:13:46:2b:5b:6d:bd:ea:10:dc:3f:22:c5:
96:52:6f:18:1c:72:3c:37:57:5a:88:ee:f2:2f:a0:e9:48:8f:
6d:24:d5:f6:e6:f4:dd:47:f2:9a:8a:df:63:43:a9:e1:aa:32:
12:a8:5e:e7:17:0d:01:f9:2a:af:1d:97:8f:9d:df:21:8f:1b:
10:2a:1b:62:52:a8:10:d9:5c:b0:78:a6:8f:49:85:c4:bd:f3:
8d:77:d7:67:e4:3d:63:1f:07:e6:4f:9a:e0:45:50:f2:d6:4d:
51:44:99:23:3e:a6:f8:fa:ed:9d:40:23:77:5d:fe:a6:9c:c2:
89:46:a6:11:5c:37:1c:8b:be:f8:90:14:f3:78:9c:90:a0:03:
32:96:a4:18:f4:e6:01:82:17:1f:e1:df:b1:ca:62:4c:8b:b2:
89:2d:14:5f:5f:7a:17:9c:ee:1b:ff:6a:e8:f7:8b:71:ae:8c:
6d:38:ff:4d:75:a8:03:b2:bd:a9:46:3e:49:d7:8a:f3:ac:aa:
29:60:42:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:13:04 2026 by rpki-client